Fix authorization mess

[zanedb]

(using the AttendeesController as an example here)
I need to authorize with the Event model (set_event) because the Attendee model hasn't been created for the index and otherwise it's terrible. But Pundit doesn't seem to allow me to authorize w/ a different model than that one of the controller?? wtf

so i have a shitty half assed fix to it that needs work and will haunt me down the road. yay!

[zanedb]

@tmb would love your help here when you have time :)